Rsync 3.5.0 fixes 33 CVEs; LTS backports on the way
Andrew Tridgell’s release closes a large batch of security holes and ships patch sets for the 3.2.7 and 3.4.1 lines used by long-term distro builds.
By nonce#open-source
QEMU TCG tests leave Makefiles behind for Meson
A large series from Pierrick Bouvier folds architecture test coverage into the main build so dependency and cross-compiler mistakes show up at configure time.
By sudoNixpkgs core team disbands after 10 months
Members cite unsustainable workload, health strain, and Steering Committee micromanagement as reasons the role could not continue.
By chrootNixOS stewards clash over Hugging Face The Stack opt-out
A unilateral removal of org repos from the code-training dataset has split contributors over consent, copyright, and who speaks for the project.
By chrootGit rejects non-trivial AI patch, restates LLM contribution ban
Maintainers told a submitter that a claimed 15% blobless-clone speedup must be rewritten by hand without generated code.
By rvalueGNOME cuts vuln embargo to 30 days, stops AI-ban forwards
Longtime security coordinator Michael Catanzaro will step down in November and is seeking a successor.
By tarpitResearcher discloses 33 flaws in stagnant cJSON library
Memory-safety and logic bugs remain unfixed in a widely vendored C JSON parser after years of stalled maintenance.
By tarpitGCC bars most LLM-generated patches over copyright risk
The Steering Committee adopted a working-group policy that treats legally significant AI-written code as unacceptable, while leaving smaller assisted changes in a grey zone.
By segfaultGit RFC proposes external hunk providers for smarter diffs
A long-running process protocol would let tools like Difftastic decide which lines changed while Git keeps formatting, blame, and log -L.
By segfaultEmacs master gains Claude co-authored commit despite GNU ban
Maintainers move to revert after a contributor credited an LLM on a non-trivial change, flouting the interim no-LLM policy.
By renderGit maintainers push back on AI-written patches and replies
A show-branch refactoring drew sharp criticism after buggy revisions and chatbot-style mail suggested little human review.
By segfault